Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b7d6d4-941b-422a-905d-e29833c9c1c6/1/wRjjTglHnc6J72HZj0wqv4GJzyQ.mft
File: wRjjTglHnc6J72HZj0wqv4GJzyQ.mft (raw, json)
Hash identifier: BxfZaVSOmakYxMVvhyH+SQGyCwr4n62Av2TILsIwYLc=
Subject key identifier: 96:72:23:60:19:57:AB:7D:10:2C:BF:92:C1:A5:ED:4A:AD:0C:30:4F
Authority key identifier: C1:18:E3:4E:09:47:9D:CE:89:EF:61:D9:8F:4C:2A:BF:81:89:CF:24
Certificate issuer: /CN=c118e34e09479dce89ef61d98f4c2abf8189cf24
Certificate serial: 019511347F6C0BB218A6854E82BBEF3BD300
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wRjjTglHnc6J72HZj0wqv4GJzyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b7d6d4-941b-422a-905d-e29833c9c1c6/1/wRjjTglHnc6J72HZj0wqv4GJzyQ.mft
Manifest number: 0244
Signing time: Mon 17 Feb 2025 00:00:07 +0000
Manifest this update: Mon 17 Feb 2025 00:00:07 +0000
Manifest next update: Tue 18 Feb 2025 00:00:07 +0000
Files and hashes: 1: C_QylDjtmeXaqfQqwZx9bW-pizU.roa (hash: TxsogUKYtZ4fwZHLxBqP+QAdRfnbhKHLWlZVu8NvQ2Y=)
2: wRjjTglHnc6J72HZj0wqv4GJzyQ.crl (hash: A0Y5qrx+kBe676slPtJu7GlQks8DEO6uYdDOCRGBL68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/b7d6d4-941b-422a-905d-e29833c9c1c6/1/wRjjTglHnc6J72HZj0wqv4GJzyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/b7d6d4-941b-422a-905d-e29833c9c1c6/1/wRjjTglHnc6J72HZj0wqv4GJzyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/wRjjTglHnc6J72HZj0wqv4GJzyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:34:7f:6c:0b:b2:18:a6:85:4e:82:bb:ef:3b:d3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c118e34e09479dce89ef61d98f4c2abf8189cf24
Validity
Not Before: Feb 17 00:00:07 2025 GMT
Not After : Feb 18 00:00:07 2025 GMT
Subject: CN=967223601957ab7d102cbf92c1a5ed4aad0c304f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f8:b1:e9:47:d4:7a:89:a7:c6:6e:c0:9a:a0:
74:9e:30:63:52:8f:65:d5:6e:05:93:10:c7:ae:2e:
3f:b4:f3:fe:2f:36:3e:9d:aa:8c:c2:90:0b:7f:73:
ab:e0:cb:0d:df:0d:31:1a:18:89:4d:a1:b5:31:7d:
d5:25:91:58:64:dd:3b:6f:0f:b6:1c:1b:44:d8:3d:
5d:4c:15:0a:ce:bc:29:74:6a:6e:a7:6a:88:e4:74:
d9:76:b2:98:d9:c0:cf:25:d1:17:fd:f6:67:93:f9:
d6:aa:57:8d:41:9e:df:fe:08:e8:61:85:8c:94:f1:
72:c8:5f:7e:d3:60:1d:2a:ad:15:7b:82:1e:10:b6:
27:ec:f6:c7:52:9c:c2:f4:1b:b5:dd:84:5e:c8:a4:
05:9d:16:30:93:eb:51:5a:f4:2b:bf:f0:77:3b:d6:
f0:5f:88:ab:fe:0f:37:72:a8:90:9e:f7:f5:4c:c6:
da:e9:36:d4:96:76:75:1e:88:4a:4d:51:2c:86:53:
7a:f6:6c:5a:2c:ec:7c:52:29:91:ef:82:f4:c8:b2:
3c:34:db:2f:70:ca:2c:af:e8:2a:d2:7a:fd:5f:d7:
c9:d4:8b:98:00:8c:eb:92:93:d0:94:9f:97:fd:4b:
e3:c2:81:e7:69:bb:de:be:17:7f:f1:6d:a6:aa:19:
ad:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:72:23:60:19:57:AB:7D:10:2C:BF:92:C1:A5:ED:4A:AD:0C:30:4F
X509v3 Authority Key Identifier:
keyid:C1:18:E3:4E:09:47:9D:CE:89:EF:61:D9:8F:4C:2A:BF:81:89:CF:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wRjjTglHnc6J72HZj0wqv4GJzyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b7d6d4-941b-422a-905d-e29833c9c1c6/1/wRjjTglHnc6J72HZj0wqv4GJzyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b7d6d4-941b-422a-905d-e29833c9c1c6/1/wRjjTglHnc6J72HZj0wqv4GJzyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:35:a9:f4:b1:fe:3a:96:33:d3:5a:2e:be:cc:b8:86:b5:fd:
ea:a2:62:7b:1c:69:74:42:4f:0d:40:d0:aa:d7:37:58:a4:f3:
2a:4b:00:4f:2a:51:48:62:68:f1:26:db:25:aa:37:d0:09:c8:
14:1b:b0:c8:20:78:df:ae:08:da:07:63:1f:87:66:2f:a0:4f:
0a:e4:c0:ce:76:4e:9b:be:ab:d4:3b:d3:8e:0c:98:5b:d3:04:
15:6d:ea:e8:95:7b:c2:7e:4b:87:48:ee:f4:8c:9f:1a:62:0a:
97:d8:a8:ed:6b:ca:75:c1:39:ad:6f:1c:db:1f:52:9c:fb:5f:
c0:5d:27:6c:52:37:a8:51:28:80:d8:ce:07:5f:fd:4e:96:d5:
f2:62:94:cf:05:c8:60:9f:99:80:a0:27:df:96:d5:8d:2f:63:
7d:0a:4e:c0:50:d4:5d:32:4f:12:36:72:63:c2:62:fa:cd:28:
a1:1b:99:b8:e1:75:49:fc:05:7c:c9:f9:4a:1b:eb:88:fe:93:
11:d9:61:e4:2d:19:43:09:7a:86:a4:ad:2f:aa:37:7c:67:52:
ca:e7:8f:27:00:1f:d2:92:ee:8c:8d:d5:a6:50:86:a7:47:8a:
c0:d6:c2:0a:5f:3a:b0:c1:e5:06:66:a7:de:34:8c:51:19:d7:
ee:df:3b:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:53:44 2025 by rpki-client